A flaw has been found in OSGeo gdal up to 3.13.0dev-4.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. May 9, 2026 · NIST NVD

   Detected

   A flaw has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this vulnerability is the function SWSDfldsrch of the file frmts/hdf4/hdf-eos/SWapi.c. Executing a manipulation can lead to heap-based buffer overflow. The attack requires local access. The exploit has been published and may be used. Upgrading to version 3.13.0RC1 addresses this issue. This patch is called 3e04c0385630e4d42517046d9

2. Jul 24, 2026 · NIST NVD

   Updated

   A flaw has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this vulnerability is the function SWSDfldsrch of the file frmts/hdf4/hdf-eos/SWapi.c. Executing a manipulation can lead to heap-based buffer overflow. The attack requires local access. The exploit has been published and may be used. Upgrading to version 3.13.0RC1 addresses this issue. This patch is called 3e04c0385630e4d42517046d9

Affected

• cpe osgeo/gdalversion unspecified
• cpe osgeo/gdal3.13.0

Sources

• CVE.orgVulnerability recordCVE-2026-8212

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-8212

  A flaw has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this vulnerability is the function SWSDfldsrch of the file frmts/hdf4/hdf-eos/SWapi.c. Executing a manipulation can lead to heap-based buffer overflow. The attack requires local access. The exploit has been publis

  nvd.nist.gov

References

• Product · github.com
• Patch · github.com
• Exploit · github.com
• Patch · github.com
• Exploit · github.com
• Exploit · vuldb.com
• Third Party Advisory · vuldb.com
• Permissions Required · vuldb.com